www.bkw.ch

- BKW AG -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0f:24:22:9d:3b:d3:cc:8a:e5:a2:4e:7f:2f:a9:e2:43 was issued on by DigiCert Inc.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

BKW AG

Organization: BKW AG
Locality: Bern
Country: CH

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:24:22:9d:3b:d3:cc:8a:e5:a2:4e:7f:2f:a9:e2:43
Serial Number (int): 20126044682944695636837727844247921219
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 06:c1:3f:35:a6:cc:34:5c:e9:40:99:e0:40:db:bc:0b:2c:07:08:65
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 73:c1:c5:13:1e:5a:26:4d:e5:5a:eb:5b:4d:2b:b8:4f:0c:8d:f3:86
Fingerprint (sha256): 0c:c5:e5:45:a1:01:9c:fa:8f:23:85:b8:32:64:ca:cb:d8:a1:1b:cc:da:58:a9:bc:7a:c5:e1:92:4f:16:b7:aa

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate www.bkw.ch

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bkw.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.bkw.ch
www.bkw.com
www.bkw.de
www.bkw-austria.at
www.bkw-france.fr
www.bkw-italia.it
bkw.ch
bkw.com
bkw.de
bkw-austria.at
bkw-france.fr
bkw-italia.it

Other certificates including the domain name bkw.ch

(limited to 100 certificates)
ecmt.bkw.ch
jobs.bkw.ch
ins.bkw.ch
auth.crmdynamicst.bkw.ch
gridconnection.bkw.ch
event.bkw.ch
trinity.bkw.ch
blog.bkw.ch
blog.bkw.ch
zoon.bkw.ch
haefa.bkw.ch
event-nachhaltigkeit.bkw.ch
blue.bkw.ch
api-notis.bkw.ch
login.bkw.ch
azimi.int.bkw.ch
oscar.bkw.ch
api.bkw.ch
www.bkw.ch
shop.bkw.ch
blog.bkw.ch
bfc-example-app-next.bkw.ch
www.bkw.ch
outlook.bkw.ch
api-crm.bkw.ch
zoon.bkw.ch
blog.bkw.ch
ns-t-bkw-dmz-cus-aaa-ldap-01.bkw.ch
bkw.ch
event-nachhaltigkeit.bkw.ch
bkw.ch
feuerwehr.bkw.ch
ictmonitoring.bkw.ch
belvis.aek.ch
services-q.bkw.ch
ewp.bkw.ch
static.bkw.ch
event.bkw.ch
connect.bkw.ch
fed.bkw.ch
api-dsv-energy-strategy-backend.bkw.ch
event.bkw.ch
git.bkw.ch
netzauskunft.bkw.ch
blog.bkw.ch
akeneo-admin.bkw.ch
eventportal.bkw.ch
ra-kkm.bkw.ch
m2c-bills.bkw.ch
cloud.aek.ch
event.bkw.ch
jobs.bkw.ch
oscar.bkw-fmb.ch
event.bkw.ch
pwreset.bkw.ch
oscar.bkw.ch
*.msda.bkw.ch
www.bkwengineering.com
my.home-energy.bkw.ch
sitzung.hostedapps.bkw.ch
cockpitservicears.bkw.ch
outage.bkw.ch
api-tangento.bkw.ch
jobs.bkw.ch
shop.bkw.ch
event-nachhaltigkeit.bkw.ch
visualization.bkw.ch
visustrom1.bkw.ch
netzauskunft.bkw.ch
blog.bkw.ch
thehub-cloud.bkw.ch
ise.bkw-fmb.ch
BESUCHERZENTREN.BKW.CH
gsxmonitoring.bkw.ch
energy-asset.bkw.ch
mdomus-poc.bkw.ch
login-v2-t.bkw.ch
shop.bkw.ch
metering-workforce.bkw.ch
nexus.bkw.ch
my.home-energy.bkw.ch
haefa.test.bkw.ch
energymonitoring.bkw.ch
api-q.bkw.ch
oscar.bkw.ch
www.abaclik.bkw.ch
*.apps.collab.bkw.ch
*.elastic.int.bkw.ch
plantservices.bkw.ch
mdl.bkw.ch
blog.bkw.ch
*.aks02.bkw.ch
api-energy-asset.bkw.ch
netzauskunft.bkw.ch
smk-mdm.bkw.ch
event-nachhaltigkeit.bkw.ch
shop.bkw.ch
api-m2c-t.bkw.ch
eventportal.bkw.ch
api-oneportal-edm.bkw.ch

Certificate

The complete raw certificate details for www.bkw.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAh4o3+ChedCjALLaP+mj7
TneQiroCOgqtDvsZnkuQPEnKZ+JHxFPBnkA46JWc7wCT9MTbwRrcbpGyF9vzxvqk
d3jZGol8Y7rzOFnjNSqiDZoocg3RMQwl9g+UoFezmkPicW1LXEE4gURe+oxI3ft+
WBn8qsQxSbB0VXGLPV5xuuxBh4pCOeEzxz6FCGca090cq/zH0nQEfUGExXurGGq+
BYakgIQbDvYUJrNDk4OyP64XYaL3cG1yTDLu8zCkZAdr7Q8zQbLh76dZ+hHxvP4A
BxFU83fpTwqGNz7HexiQVcB7zthh+8izV4FOcnh99dC417JCEq7E/igbAY2iryqs
mE9H+HD8gUGkvX66Hd3GJW7MUgMzSGcJBCWtc6+NNgdjKOjNisNAumCmnfiKW23s
8Hed/M5T0hs/Ce6tBIXbkfAVX6qjNf20Xpy+GO9NN6ZayTuzgItBousCsrq6kt2I
n2JN5YAtTDHRhl0cwefD2Ho7KEAmQqSxAC6vcHz3lp15DmSKu9UrEqbf9iUfzspv
3CGsFLxyAbJk31p7gyidHDkjBCTtydGhxsM1qrhypt4R7oX7F8IFYYB59pecCQVi
9ZhG4lz7y1CGdKlkutzcNpUkJV5kEZWEDfRaUImUmECqf1D1S0r6/NwmdblhiCv6
fclz4qQdZE/glPb/Nj7fn9MCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20126044682944695636837727844247921219
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BKW AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bkw.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 552954616430137370679376193483328597856523696796560406532619321178254640595669599528726990866378960035618012079505382294498571051210973748133410408546291040713801568651960973115470503339015822208430832961157523979631457386743277471056994442562776525450397846551361249507409068580278933790367938224384821013766214912943754289019595202101154182142339682790616450391796451376317355139266718817906331530758423174524332992879116619533396992097667984812341899751362472841557373433103999557333036093158066449126782078150099341296651542840540792754128961687319406885491932756170059364845982320691501713156986223320649379392257377903282616351790185975012004267275921042245380272136609116149566675682587802542350920479557216232953392710429080393979986904045690565981625418075183362022303462409977685761185597769114180111617257956301675307717032221559430877752554763160155844298089307361630174660869992225512312565582109971098705642634196741001255189736642923396465187576881480778974633652502588138862108847611129806637849471595099186195924818954163657699513558743452747519451766296680407276350703544420681095020646421088125594099563688316457498256718639502521931239990001632290612270860443180182750355243137734618630412384706057580771666796499
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06c13f35a6cc345ce94099e040dbbc0b2c070865
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (169 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bkw.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bkw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bkw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bkw-austria.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bkw-france.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bkw-italia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bkw.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bkw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bkw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bkw-austria.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bkw-france.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bkw-italia.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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